atk4/chart

Release historycaution

The package has existed for over seven years but only five releases, with a median interval of about 611 days; one release in the last 12 months shows activity but a slow cadence.

Repo bus factorcaution

One contributor made all six recent commits, leaving maintenance dependent on a single person; organization backing provides some handoff capacity but does not remove the concentration.

Repo commit activitycaution

Six commits were made in the last three months, showing recent activity, but all came from one active maintainer.

Security policycaution

The repository has no security policy, which is a transparency and response-process gap for a maintained library.

Workflow auditcaution

All workflows were analyzed and have no untrusted checkouts or script injection, but the high-confidence audit found a release workflow using a floating latest container image, weakening build reproducibility.